The drift of users into the shadow zone is clear enough, but let's not forget that the trendy hardware and apparently "free" SAAS options are subject to arbitrary shifts in fashion as well as to unilateral financial and functional changes by suppliers. Some data is genuinely corporate and should be maintained indefinitely for approved access, some data is genuinely secret and must be protected and all data deserves to be archived for recall in the long term. Corporations do not police their own regulations properly, nor do they define practical regulations which reflect the real value of data. The lack of comprehension in senior management offices is par for the course - this is no reason for professional IT implementors to throw in the towel.